critical9.8
CVE-2020-13567
Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7.
Impact
Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Emr | Openemr | Versions 5.0.2, 6.0.0 |
| Phpgacl Project | Phpgacl | Version 3.3.7 |